Extraction of an Architectural Model for Least Privilege Analysis

2012 ◽  
Vol 3 (4) ◽  
pp. 27-44
Author(s):  
Bernard Spitz ◽  
Riccardo Scandariato ◽  
Wouter Joosen

This paper presents the design and implementation of a prototype tool for the extraction of the so-called Task Execution Model directly from the source code of a software system. The Task Execution Model is an essential building block for the analysis of the least privilege violations in a software architecture (presented in previous work). However, the trustworthiness of the analysis results relies on the correspondence between the analyzed model and the implementation of the system. Therefore, the tool presented here is a key ingredient to provide assurance that the analysis results are significant for the system at hand.

Author(s):  
R.J. Schalkoff ◽  
A.E. Turner ◽  
R. Singh ◽  
K.F. Poole ◽  
S. King ◽  
...  

2012 ◽  
Vol 263-266 ◽  
pp. 1961-1968
Author(s):  
Yong Chao Song ◽  
Bu Dan Wu ◽  
Jun Liang Chen

According to the feature of the JBPM workflow system development, the target code generated is determined by analyzing the process of JBPM workflow development and the architecture of J2EE. The code generation tool generates code by parsing the static form source code and loading the code generation template. The code generation tool greatly shortens the JBPM workflow system development cycle and reduces the cost of software development which has the good practicality and scalability.


Author(s):  
Marco Konersmann ◽  
Michael Goedicke

AbstractAs software architecture is a main driver for the software quality, source code is often accompanied by software architecture specifications. When the implementation is changed, the architecture specification is often not updated along with the code, which introduces inconsistencies between these artifacts. Such inconsistencies imply a risk of misunderstandings and errors during the development, maintenance, and evolution, causing serious degradation over the lifetime of the system. In this chapter we present the Explicitly Integrated Architecture approach and its tool Codeling, which remove the necessity for a separate representation of software architecture by integrating software architecture information with the program code. By using our approach, the specification can be extracted from the source code and changes in the specification can be propagated to the code. The integration of architecture information with the code leaves no room for inconsistencies between the artifacts and creates links between artifacts. We evaluate the approach and tool in a use case with real software in development and with a benchmark software, accompanied by a performance evaluation.


Author(s):  
Manjula Peiris ◽  
James H. Hill

This chapter discusses how to adapt system execution traces to support analysis of software system performance properties, such as end-to-end response time, throughput, and service time. This is important because system execution traces contain complete snapshots of a systems execution—making them useful artifacts for analyzing software system performance properties. Unfortunately, if system execution traces do not contain the required properties, then analysis of performance properties is hard. In this chapter, the authors discuss: (1) what properties are required to analysis performance properties in a system execution trace; (2) different approaches for injecting the required properties into a system execution trace to support performance analysis; and (3) show, by example, the solution for one approach that does not require modifying the original source code of the system that produced the system execution.


2017 ◽  
pp. 394-409
Author(s):  
Nektarios Konstantopoulos ◽  
Vasileios Syrimpeis ◽  
Vassilis Moulianitis ◽  
Ioannis Panaretou ◽  
Nikolaos Aspragathos ◽  
...  

This chapter presents a software system based on smart cards technology for recording, monitoring and studying patients of any surgery specialty (General Surgery, Orthopedics, Neurosurgery, etc.). The system is also suitable for the computerization of any surgery specialty clinic and the respective surgical material repositories. Dynamic customization functions adapt the system to the different characteristics of the surgery specialties. Special customization is involved concerning implantable materials. The .NET platform and Java Cards used for the development of the system and the architectural model of the system are designed towards satisfying the basic integration and interoperability issues. The developed system is “doctor-friendly” because it is based on classifications and knowledge grouping used in every day clinical practice provided from medical experts on the field but is not intended to be a complete Electronic Medical Record (EMR). The major scope of this effort is the development of a system that offers a fast and easy installable, low cost solution in health environments still immature in adopting solutions based exclusively on Informatics and is designed to be installed in small Private Medical Consulting Rooms to Community Clinics, Health Centers, Hospital Surgery Departments till Central Health Organizations.


Sign in / Sign up

Export Citation Format

Share Document